$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: /LC0acqdouoYijbjTUBNgteV3qyLfo3sSrgdqfRzNlM= Subject key identifier: DF:85:27:38:B8:14:C4:17:56:D0:CC:FE:76:FF:31:EB:52:DA:56:BD Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 0145 Signing time: Wed 17 Sep 2025 04:54:06 +0000 Manifest this update: Wed 17 Sep 2025 04:54:05 +0000 Manifest next update: Wed 24 Sep 2025 04:54:05 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: DOtn0J3wI1mr68lkQq9UCJZvMKjTaXXI7YwIuRKQn90=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: Czi7PWRQ87B1nKXSiQO2Heb4QoSzR8e/1K23JvG3RhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: Sep 17 04:54:05 2025 GMT Not After : Sep 24 04:54:05 2025 GMT Subject: CN=68ca3eed-521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:6f:d6:cd:b2:ee:d9:39:e0:73:d9:b1:22: 11:f2:ee:14:e7:68:80:77:d8:27:a3:ee:9b:78:2a: 89:5e:9d:ea:0d:55:07:5f:d7:1b:8f:e0:64:08:c2: 5d:fa:b8:33:b5:14:de:f1:14:99:35:72:b1:d2:2c: 59:13:2e:04:52:f1:e0:0e:fc:05:b9:b3:e4:bb:8e: 43:04:95:06:43:b0:d9:88:f3:0d:2d:e3:02:09:7b: 50:17:58:11:d1:f3:ae:1b:55:30:2c:17:0f:51:3b: bd:db:29:bc:26:2d:7d:56:a6:88:e2:1e:23:95:d9: d1:a9:09:f0:86:1a:fd:a6:5f:e1:fd:c6:11:6a:10: d0:8c:f2:64:24:b7:fa:c2:84:e4:1f:17:d1:55:c7: 0c:af:3a:0a:d4:8e:f1:b8:47:cf:19:a2:9a:c4:49: 61:55:69:ca:dd:5f:c3:f6:26:9e:0a:06:e2:71:62: 88:17:16:b8:c6:fe:66:eb:a6:55:23:0a:4c:7d:bc: c3:87:ab:a1:1d:d4:f4:80:d9:c3:9f:59:57:8b:17: c7:48:b9:dc:9f:78:11:d6:e4:91:49:56:bb:a5:2c: f8:bd:f8:44:08:cd:38:95:2b:83:ec:26:a3:57:3d: 9e:84:89:7f:ff:ac:d5:a7:24:8f:90:54:6f:f3:d3: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:85:27:38:B8:14:C4:17:56:D0:CC:FE:76:FF:31:EB:52:DA:56:BD X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:37:47:e0:d7:66:ab:f0:56:34:6b:05:1e:54:0d:e7:c8: e2:41:4c:5e:df:c6:7a:e5:59:02:44:5e:c3:fa:62:98:2e:e1: 32:8b:e5:4c:98:52:ac:07:b9:a2:63:c3:7d:da:93:74:b7:1b: f5:f5:a4:f5:a1:4d:7a:64:bb:e4:aa:b3:1c:e1:ab:2f:eb:d7: ad:86:05:8b:d0:f0:79:d0:9b:00:cc:77:e2:f3:3f:d7:e1:35: 02:39:2f:98:e4:1f:88:56:a8:c1:a9:bd:f0:1f:4d:84:c9:30: 74:03:c8:8e:68:17:75:bb:ee:4d:17:b4:3a:7f:70:ac:f2:c2: 4d:6d:ee:11:5c:5a:f5:49:33:59:02:76:8a:45:cd:33:e0:eb: b1:09:8c:0f:1d:db:c2:99:e8:c0:51:2e:8f:f0:04:26:dc:73: ae:01:df:10:50:55:77:9b:7b:23:e0:ba:c4:60:fa:9d:de:f7: b5:b9:72:0d:e1:d2:e6:91:4b:6e:ba:6a:6c:97:e5:4b:90:3b: 43:a3:83:04:7f:14:ba:9d:48:bc:0c:9b:a1:30:0d:fb:a5:cf: b3:8f:d3:7a:9c:dc:76:03:4b:ed:f7:22:17:9b:bc:72:ba:20: d3:ca:18:fe:ba:6f:d7:21:34:09:65:5b:2b:bf:dd:f1:b2:4c: e9:b8:41:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0 RTY1RkRGMjIwHhcNMjUwOTE3MDQ1NDA1WhcNMjUwOTI0MDQ1NDA1WjAYMRYwFAYD VQQDEw02OGNhM2VlZC01MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7Rv1s2y7tk54HPZsSIR8u4U52iAd9gno+6beCqJXp3qDVUHX9cbj+BkCMJd +rgztRTe8RSZNXKx0ixZEy4EUvHgDvwFubPku45DBJUGQ7DZiPMNLeMCCXtQF1gR 0fOuG1UwLBcPUTu92ym8Ji19VqaI4h4jldnRqQnwhhr9pl/h/cYRahDQjPJkJLf6 woTkHxfRVccMrzoK1I7xuEfPGaKaxElhVWnK3V/D9iaeCgbicWKIFxa4xv5m66ZV IwpMfbzDh6uhHdT0gNnDn1lXixfHSLncn3gR1uSRSVa7pSz4vfhECM04lSuD7Caj Vz2ehIl//6zVpySPkFRv89PlUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+FJzi4 FMQXVtDM/nb/MetS2la9MB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr2zdH4Ndmq/BWNGsFHlQN58jiQUxe38Z65VkCRF7D+mKYLuEyi+VM mFKsB7miY8N92pN0txv19aT1oU16ZLvkqrMc4asv69ethgWL0PB50JsAzHfi8z/X 4TUCOS+Y5B+IVqjBqb3wH02EyTB0A8iOaBd1u+5NF7Q6f3Cs8sJNbe4RXFr1STNZ AnaKRc0z4OuxCYwPHdvCmejAUS6P8AQm3HOuAd8QUFV3m3sj4LrEYPqd3ve1uXIN 4dLmkUtuumpsl+VLkDtDo4MEfxS6nUi8DJuhMA37pc+zj9N6nNx2A0vt9yIXm7xy uiDTyhj+um/XITQJZVsrv93xskzpuEEy -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:48 2025 by rpki-client